Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37511477-1d58-3723-be12-b8847914fd47.roa
File:                     37511477-1d58-3723-be12-b8847914fd47.roa (raw, json)
Hash identifier:          bJsS4vnQfxXFRfs9XnN/ufUEpvV8sUoC2N/qi2qgVpc=
Subject key identifier:   89:37:D6:24:88:0E:55:FE:BC:B9:92:1D:E9:9E:A1:E6:DE:36:9D:71
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847600B9CCEE82118A7A1CC9100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37511477-1d58-3723-be12-b8847914fd47.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     62240
IP address blocks:        166.1.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9c:ce:e8:21:18:a7:a1:cc:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=be377a48-0d4b-44bc-abac-b284a04c0f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:0b:10:52:ae:ad:32:f2:a7:4b:62:31:92:
                    bc:3d:55:c2:26:e0:ba:35:13:a5:ce:dc:67:5d:71:
                    84:16:28:71:c7:bf:bd:68:28:bb:62:14:01:7e:fc:
                    ba:5e:72:77:5a:34:79:ab:d8:50:5c:ce:b5:8f:41:
                    2b:e9:bf:8f:40:62:0b:d7:a1:fc:5b:86:86:91:31:
                    7c:3d:b8:b2:ad:ee:6f:8e:ec:44:5d:0d:db:4a:95:
                    8f:a9:87:cc:5a:73:e5:8d:c4:4f:fd:25:a1:fc:ea:
                    12:dc:43:10:24:da:3d:bf:df:12:9d:c0:22:aa:06:
                    51:10:6e:c5:81:a4:99:4a:04:2a:00:f1:eb:5a:97:
                    85:3f:20:3b:2b:c7:b1:95:6d:05:dc:34:b9:4e:9f:
                    43:6e:82:5d:42:19:c5:eb:3b:b1:95:46:67:65:5e:
                    35:3d:6c:4c:dc:7c:5d:ee:de:c3:f3:b2:40:b1:24:
                    b6:75:74:c9:9e:90:f9:a2:f8:1c:81:4e:5d:6c:d7:
                    e1:99:c4:2a:3f:67:e8:99:ff:a0:e7:48:60:f7:45:
                    45:bc:19:a3:fb:b5:b5:a9:bc:85:66:52:25:a7:8c:
                    fc:9d:46:4f:58:e6:fe:5d:71:73:ba:b8:a2:e2:f4:
                    fa:07:8e:40:6a:ab:c6:a8:c5:26:15:89:e9:14:9b:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:37:D6:24:88:0E:55:FE:BC:B9:92:1D:E9:9E:A1:E6:DE:36:9D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37511477-1d58-3723-be12-b8847914fd47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:fa:61:6a:71:f4:35:a4:08:58:7d:d3:a5:53:79:72:64:2f:
         72:91:6f:66:d7:20:70:be:83:db:c2:7f:a5:d7:63:65:47:0b:
         f1:e4:d8:dd:c7:d0:62:bc:8f:83:c9:2c:c0:39:c5:19:89:56:
         96:1d:30:58:31:90:72:3d:8e:18:ba:03:db:95:97:50:20:ec:
         11:aa:37:26:d6:3a:30:bb:b0:af:cb:17:dd:3d:dc:84:cb:90:
         bc:44:9b:c3:2f:0f:f0:50:6b:ad:2f:fe:c1:56:98:01:38:db:
         a1:39:d2:87:28:63:87:96:bf:4f:ec:51:28:2b:9a:81:35:b9:
         93:bc:58:49:48:0d:0d:1e:fa:93:1f:35:38:ca:72:5a:b4:81:
         b5:22:36:71:b4:9b:73:a0:ca:1b:f4:c7:ac:09:e1:1b:45:84:
         10:19:71:32:ac:77:06:e5:f6:3d:80:45:36:d1:3b:8c:c9:ca:
         6e:98:f4:70:27:15:85:52:65:e4:da:34:46:a4:1a:3e:73:1a:
         41:bc:55:6a:a9:8f:97:34:fb:f3:fb:a0:e3:9f:37:ad:5e:59:
         df:04:93:a0:79:4c:8b:28:b3:cc:e5:7c:da:c5:2f:67:1f:15:
         c5:7c:51:3f:0c:22:4c:f4:dd:2b:be:4e:ca:7a:a8:5b:89:60:
         01:9d:a6:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC5zO6CEYp6HMkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
YmUzNzdhNDgtMGQ0Yi00NGJjLWFiYWMtYjI4NGEwNGMwZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncYLEFKurTLyp0tiMZK8PVXCJuC6NROlztxn
XXGEFihxx7+9aCi7YhQBfvy6XnJ3WjR5q9hQXM61j0Er6b+PQGIL16H8W4aGkTF8
Pbiyre5vjuxEXQ3bSpWPqYfMWnPljcRP/SWh/OoS3EMQJNo9v98SncAiqgZREG7F
gaSZSgQqAPHrWpeFPyA7K8exlW0F3DS5Tp9DboJdQhnF6zuxlUZnZV41PWxM3Hxd
7t7D87JAsSS2dXTJnpD5ovgcgU5dbNfhmcQqP2fomf+g50hg90VFvBmj+7W1qbyF
ZlIlp4z8nUZPWOb+XXFzurii4vT6B45AaqvGqMUmFYnpFJvt+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIk31iSIDlX+vLmSHemeoebeNp1xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzc1MTE0NzctMWQ1OC0z
NzIzLWJlMTItYjg4NDc5MTRmZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKz6YWpx9DWkCFh906VTeXJkL3KRb2bXIHC+g9vCf6XXY2VHC/Hk2N3H
0GK8j4PJLMA5xRmJVpYdMFgxkHI9jhi6A9uVl1Ag7BGqNybWOjC7sK/LF9093ITL
kLxEm8MvD/BQa60v/sFWmAE426E50ocoY4eWv0/sUSgrmoE1uZO8WElIDQ0e+pMf
NTjKclq0gbUiNnG0m3Ogyhv0x6wJ4RtFhBAZcTKsdwbl9j2ARTbRO4zJym6Y9HAn
FYVSZeTaNEakGj5zGkG8VWqpj5c0+/P7oOOfN61eWd8Ek6B5TIsos8zlfNrFL2cf
FcV8UT8MIkz03Su+Tsp6qFuJYAGdpok=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:00 2024 by rpki-client on console-ams.rpki-client.org